7.6
High
CVE-2026-94117 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar –…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HashBar – WordPress Notification Bar 2.0 | earliest → 2.0.3 | No fix stated |